neuron-core/maestro

Lifecycle scriptscaution

The package runs a post-autoload-dump script during installation. This is a meaningful install-time action, though the signal does not show a dangerous or unusually broad script.

Repo bus factorcaution

All six recent commits came from one contributor, creating a concentrated maintenance base. Organization ownership partly compensates by providing a potential handoff path, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded six commits in the last three months, showing some ongoing work. The volume is modest, so maintenance momentum is not strong.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That leaves a security-process gap for a package with 11 runtime dependencies.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is a process gap rather than evidence of unsafe code.